Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/db9ed870-0b17-3c8f-8276-213a7c9a9050.roa
File:                     db9ed870-0b17-3c8f-8276-213a7c9a9050.roa (raw, json)
Hash identifier:          ONHTV4XPZNLdv3WLETxfwcCBP+XeRq90QF2O138qEco=
Subject key identifier:   82:C3:C8:85:0D:35:7A:AB:EE:B3:C8:91:96:D7:AB:FC:59:B3:E9:B3
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A093AA8B1125EDB29D3640800
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/db9ed870-0b17-3c8f-8276-213a7c9a9050.roa
Signing time:             Sat 31 May 2025 13:01:03 +0000
ROA not before:           Sat 31 May 2025 13:01:03 +0000
ROA not after:            Fri 29 Aug 2025 13:01:03 +0000
asID:                     36629
IP address blocks:        2001:500:121::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:09:3a:a8:b1:12:5e:db:29:d3:64:08:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 31 13:01:03 2025 GMT
            Not After : Aug 29 13:01:03 2025 GMT
        Subject: CN=797f5bd1-22b9-4be7-baf4-77c263062727
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f0:37:81:17:07:b6:24:d0:9d:5b:8c:63:6b:
                    f3:ed:0f:a3:fa:90:4e:63:cc:2b:68:9b:39:c4:08:
                    e4:40:02:14:10:86:8f:ee:4b:06:e0:4a:2f:4f:d9:
                    d8:33:57:a6:e1:fb:f7:00:49:7e:a2:90:2b:29:5b:
                    45:4b:ef:83:57:91:46:cb:7b:53:b9:f4:bf:c1:7b:
                    b9:14:24:1c:d7:c3:47:94:53:11:7c:6a:2a:ea:9a:
                    e4:4f:c9:c6:f4:86:0c:30:a7:32:88:95:48:68:61:
                    96:45:c7:51:ba:a0:a8:fd:c5:6f:29:85:a1:e0:2c:
                    52:2a:dd:39:b1:0d:f5:02:a5:5a:8f:f8:e9:e7:22:
                    17:e9:fa:5d:38:58:44:21:43:e5:67:ad:cb:09:87:
                    ec:2b:a5:51:0c:9a:30:5c:15:0b:b8:2a:ab:8a:3c:
                    ed:bc:0e:63:60:f2:8a:82:cb:a4:37:c5:72:c2:57:
                    5d:82:ac:c6:e8:16:41:eb:1f:4b:e7:ee:02:1b:b5:
                    a0:91:a9:10:15:27:e5:e2:e4:9b:4b:78:57:cf:7e:
                    cd:69:61:bc:b9:28:ec:76:00:0b:a7:f2:c9:65:be:
                    45:ea:82:13:92:2e:4b:b3:20:ba:8e:11:d9:3e:a0:
                    49:80:24:e5:79:64:87:87:7c:65:6d:20:48:b9:ab:
                    97:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:C3:C8:85:0D:35:7A:AB:EE:B3:C8:91:96:D7:AB:FC:59:B3:E9:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/db9ed870-0b17-3c8f-8276-213a7c9a9050.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:121:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:cc:c0:cf:23:85:7b:af:a0:38:bc:08:92:63:e7:d1:a3:0c:
         dc:bf:8f:d3:58:c2:db:bb:30:9a:84:57:19:d4:88:12:5a:55:
         86:d9:0f:25:a4:8b:57:9f:0e:5f:54:eb:0f:15:1d:ca:c1:fb:
         46:af:fe:3e:91:85:9b:ea:c9:bb:11:35:17:31:ed:f3:7e:9d:
         d8:cd:02:49:2a:2c:02:70:29:14:fd:ce:e8:1e:a3:cb:0c:f3:
         e9:8b:1f:4f:4b:0c:aa:76:ab:58:9b:8e:53:78:7c:89:bc:3f:
         b4:92:a7:6d:72:00:71:26:7e:e3:8c:99:71:5d:8f:2b:06:9a:
         48:81:04:b4:ad:16:63:56:ca:75:8c:1e:4a:fa:4c:ea:1c:b6:
         b4:6d:26:5f:ad:b5:03:4b:71:4a:9c:e5:9c:94:d6:20:1f:a5:
         58:22:13:1d:a8:78:20:73:ba:05:67:61:ac:c9:65:fb:d0:d6:
         10:47:6c:39:0f:e7:19:7e:2a:a8:c8:90:90:e5:81:75:89:94:
         8e:5f:0a:f6:d3:94:c3:e0:ca:4b:84:1d:d2:f6:e6:5a:da:69:
         7e:ef:5d:1b:6c:1f:e8:a1:34:71:e2:20:a4:2b:07:fd:6c:7f:
         a5:a9:b8:23:eb:db:ad:27:5b:fa:6b:e6:68:1d:eb:67:44:a1:
         f0:22:2e:17
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEoJOqixEl7bKdNkCAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDUzMTEzMDEwM1oXDTI1MDgyOTEzMDEwM1owLzEtMCsGA1UEAxMk
Nzk3ZjViZDEtMjJiOS00YmU3LWJhZjQtNzdjMjYzMDYyNzI3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvvA3gRcHtiTQnVuMY2vz7Q+j+pBOY8wraJs5
xAjkQAIUEIaP7ksG4EovT9nYM1em4fv3AEl+opArKVtFS++DV5FGy3tTufS/wXu5
FCQc18NHlFMRfGoq6prkT8nG9IYMMKcyiJVIaGGWRcdRuqCo/cVvKYWh4CxSKt05
sQ31AqVaj/jp5yIX6fpdOFhEIUPlZ63LCYfsK6VRDJowXBULuCqrijztvA5jYPKK
gsukN8VywlddgqzG6BZB6x9L5+4CG7WgkakQFSfl4uSbS3hXz37NaWG8uSjsdgAL
p/LJZb5F6oITki5LsyC6jhHZPqBJgCTleWSHh3xlbSBIuauX2QIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFILDyIUNNXqr7rPIkZbXq/xZs+mzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZGI5ZWQ4NzAtMGIxNy0z
YzhmLTgyNzYtMjEzYTdjOWE5MDUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEh
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQCzzMDPI4V7r6A4vAiSY+fRowzcv4/TWMLbuzCa
hFcZ1IgSWlWG2Q8lpItXnw5fVOsPFR3KwftGr/4+kYWb6sm7ETUXMe3zfp3YzQJJ
KiwCcCkU/c7oHqPLDPPpix9PSwyqdqtYm45TeHyJvD+0kqdtcgBxJn7jjJlxXY8r
BppIgQS0rRZjVsp1jB5K+kzqHLa0bSZfrbUDS3FKnOWclNYgH6VYIhMdqHggc7oF
Z2GsyWX70NYQR2w5D+cZfiqoyJCQ5YF1iZSOXwr205TD4MpLhB3S9uZa2ml+710b
bB/ooTRx4iCkKwf9bH+lqbgj69utJ1v6a+ZoHetnRKHwIi4X
-----END CERTIFICATE-----
Generated at Fri Jun 6 19:33:41 2025 by rpki-client